$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS18328.roa File: AS18328.roa (raw, json) Hash identifier: 6S4LLrCHY3yA3zdRKuMMq8Ae4PSZGdEvWJwOE3uLcPk= Subject key identifier: 48:40:DB:AB:9B:B3:33:38:AC:C0:2D:37:BF:04:77:DD:20:E6:40:45 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7943BF7D3284DA0D74C5B0C7E8500FEF72631FCB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS18328.roa Signing time: Thu 08 Oct 2026 13:11:59 +0000 ROA not before: Thu 08 Oct 2026 13:06:59 +0000 ROA not after: Thu 07 Oct 2027 13:11:59 +0000 asID: 18328 IP address blocks: 2a0f:6284:33fa::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 14:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:43:bf:7d:32:84:da:0d:74:c5:b0:c7:e8:50:0f:ef:72:63:1f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 8 13:06:59 2026 GMT Not After : Oct 7 13:11:59 2027 GMT Subject: CN=4840DBAB9BB33338ACC02D37BF0477DD20E64045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:ea:b1:29:b7:c2:8a:aa:2b:7f:c7:bd:d1: 1c:77:e6:12:13:10:c7:e1:9a:2e:f1:84:4b:ba:04: f5:9c:fa:d3:09:8e:75:01:45:10:8d:92:c5:41:57: b5:b6:ef:81:9b:b4:42:93:1a:76:41:4f:12:7e:50: aa:59:e8:90:7a:06:5d:b9:2e:5f:03:4e:3b:df:bd: 4c:cc:73:c9:23:9f:dc:89:1a:ca:7b:c7:a4:a6:48: 37:3b:94:c9:6a:ca:cf:35:14:f1:0d:24:eb:89:33: bd:cc:2f:49:ae:f4:0e:d1:3f:62:ca:ff:4e:5e:7e: d0:a6:29:86:c9:57:e1:94:e1:b4:4e:1b:bb:52:84: 9a:fd:d0:25:45:63:36:48:19:03:2e:79:75:39:3e: 1f:97:bc:5f:c9:07:67:2e:cf:ac:e5:97:e7:68:7d: 09:d5:b5:48:b4:fa:94:9c:41:37:5f:08:6d:61:a5: 83:eb:1d:46:48:2b:56:7b:7c:f1:4e:e7:8b:3b:aa: 77:6e:ca:cf:3e:c0:74:18:a6:41:b7:92:ef:08:fe: c8:d4:67:7d:3c:7d:91:79:42:ae:dc:97:f2:37:f4: 86:5a:d4:81:1d:e4:d9:0e:39:5a:86:61:02:41:6e: 1f:5e:2b:d7:65:0d:90:fc:9d:e3:95:8f:7f:d0:35: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:40:DB:AB:9B:B3:33:38:AC:C0:2D:37:BF:04:77:DD:20:E6:40:45 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS18328.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:33fa::/48 Signature Algorithm: sha256WithRSAEncryption 49:56:a5:aa:09:06:f2:8e:f0:e9:c6:c1:86:dc:a2:a5:c6:1a: 48:90:42:1a:18:c7:d6:23:ee:89:54:85:67:55:2e:94:a9:97: d2:cf:f8:85:bb:44:3e:2e:68:14:e8:43:15:70:4f:a3:b3:86: 0c:0d:25:55:73:0e:2d:42:e3:9b:ef:8b:f9:c6:e6:99:6c:6e: 07:31:4e:10:6a:f5:2a:39:8e:bc:f9:b3:7e:9e:9c:bc:2a:aa: 31:06:f6:80:fd:4a:7e:01:f6:ff:de:8e:85:f2:b9:fb:2d:ea: b5:fb:cd:5a:2a:ab:90:40:06:07:e1:c5:d0:3d:8f:cc:ca:c3: 8f:17:50:be:9b:25:c2:b0:67:b2:7b:03:a4:e3:01:1b:59:45: ec:b8:7d:17:48:13:fb:98:5c:f9:21:8b:9a:a8:c6:48:da:34: 71:d1:6f:4b:18:b0:e2:4b:29:ae:c4:d7:ce:0e:c5:14:38:cf: 39:8a:79:e1:a5:6b:df:4b:ba:e6:68:6b:ce:3e:1a:63:e2:28: 96:42:90:28:b3:13:a1:19:cf:0a:c9:84:e6:ef:b6:05:79:cf: fe:3f:48:c1:6d:f5:1a:4f:10:aa:e0:42:9b:26:10:27:60:94: 67:ed:ad:25:d9:71:45:da:9d:e6:6a:fa:56:a6:66:96:22:77: 15:16:43:a2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUeUO/fTKE2g10xbDH6FAP73JjH8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDgxMzA2NTlaFw0yNzEwMDcxMzExNTlaMDMxMTAvBgNV BAMTKDQ4NDBEQkFCOUJCMzMzMzhBQ0MwMkQzN0JGMDQ3N0REMjBFNjQwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcX+qxKbfCiqorf8e90Rx35hIT EMfhmi7xhEu6BPWc+tMJjnUBRRCNksVBV7W274GbtEKTGnZBTxJ+UKpZ6JB6Bl25 Ll8DTjvfvUzMc8kjn9yJGsp7x6SmSDc7lMlqys81FPENJOuJM73ML0mu9A7RP2LK /05eftCmKYbJV+GU4bROG7tShJr90CVFYzZIGQMueXU5Ph+XvF/JB2cuz6zll+do fQnVtUi0+pScQTdfCG1hpYPrHUZIK1Z7fPFO54s7qnduys8+wHQYpkG3ku8I/sjU Z308fZF5Qq7cl/I39IZa1IEd5NkOOVqGYQJBbh9eK9dlDZD8neOVj3/QNSVtAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUSEDbq5uzMziswC03vwR33SDmQEUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxODMyOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoQz+jANBgkqhkiG9w0BAQsFAAOCAQEASValqgkG8o7w6cbBhtyipcYaSJBCGhjH 1iPuiVSFZ1UulKmX0s/4hbtEPi5oFOhDFXBPo7OGDA0lVXMOLULjm++L+cbmmWxu BzFOEGr1KjmOvPmzfp6cvCqqMQb2gP1KfgH2/96OhfK5+y3qtfvNWiqrkEAGB+HF 0D2PzMrDjxdQvpslwrBnsnsDpOMBG1lF7Lh9F0gT+5hc+SGLmqjGSNo0cdFvSxiw 4ksprsTXzg7FFDjPOYp54aVr30u65mhrzj4aY+IolkKQKLMToRnPCsmE5u+2BXnP /j9IwW31Gk8QquBCmyYQJ2CUZ+2tJdlxRdqd5mr6VqZmliJ3FRZDog== -----END CERTIFICATE-----Generated at Sat Oct 10 05:49:05 2026 by rpki-client